5 ms·

As if rewriting entire OS components is easy or viable for vendors, even big ones like Apple or Microsoft. Also backwards compatibility is a feature many would

As if rewriting entire OS components is easy or viable for vendors, even big ones like Apple or Microsoft. Also backwards compatibility is a feature many wouldn't give away for extra security, at least not now.

alophawen 5y ago
Nobody said it would be easy, but it is already happening. https://medium.com/@tinocaer/how-microsoft-is-adopting-rust-e0f8816566ba https://medium.com/@tinocaer/how-microsoft-is-adopting-rust-... https://preettheman.medium.com/this-is-what-apple-uses-rust-for-37ddfb9e9237 https://preettheman.medium.com/this-is-what-apple-uses-rust-...
- CyberRage 5y ago
  Did you even read what you linked? I wouldn't say "already happening" more like first early steps. Operating systems have a massive attack surface, would take years to convert code from C\C++ to Rust and likely be more vulnerable initially(the old code base went through decades of scrutiny, hundreds of scanners\fuzzers etc)
  - deleted 5y ago
    [deleted]
- saagarjha 5y ago
  I don't think Apple is shipping anything customer facing that's built on Rust?
  - dagmx 5y ago
    Not in rust, but they did: - Add reference counting to ObjC to get rid of a lot of use after free bugs (still of course possible because it's just a language suggestion and not strictly enforced like Rust or Swift) - push for adding ObjC notations to let the tooling help catch some set of bugs. Still not perfect by any means but helps a little. - created an entirely new memory safe language as Swift.
  - steveklabnik 5y ago
    Apple+ has some stuff in Rust, in my understanding.
qualudeheart 5y ago
My view is that it should be state mandated for products with over 1 million users. In the long run it would pay for itself with the money that no longer has to be spent on mitigating cyber security problems. Cyber security is national security is the people’s security. Ever since my aunt was doxxed and had her online banking money stolen I’ve become a cyber security hardliner.

alophawen 5y ago

Nobody said it would be easy, but it is already happening. https://medium.com/@tinocaer/how-microsoft-is-adopting-rust-e0f8816566ba https://medium.com/@tinocaer/how-microsoft-is-adopting-rust-... https://preettheman.medium.com/this-is-what-apple-uses-rust-for-37ddfb9e9237 https://preettheman.medium.com/this-is-what-apple-uses-rust-...

CyberRage 5y ago
Did you even read what you linked? I wouldn't say "already happening" more like first early steps. Operating systems have a massive attack surface, would take years to convert code from C\C++ to Rust and likely be more vulnerable initially(the old code base went through decades of scrutiny, hundreds of scanners\fuzzers etc)
- deleted 5y ago
  [deleted]
saagarjha 5y ago
I don't think Apple is shipping anything customer facing that's built on Rust?
- dagmx 5y ago
  Not in rust, but they did: - Add reference counting to ObjC to get rid of a lot of use after free bugs (still of course possible because it's just a language suggestion and not strictly enforced like Rust or Swift) - push for adding ObjC notations to let the tooling help catch some set of bugs. Still not perfect by any means but helps a little. - created an entirely new memory safe language as Swift.
- steveklabnik 5y ago
  Apple+ has some stuff in Rust, in my understanding.

qualudeheart 5y ago

My view is that it should be state mandated for products with over 1 million users. In the long run it would pay for itself with the money that no longer has to be spent on mitigating cyber security problems. Cyber security is national security is the people’s security. Ever since my aunt was doxxed and had her online banking money stolen I’ve become a cyber security hardliner.